This certificate does appear to be installed by default in the ca- certificates package:
$ dpkg -L ca-certificates | grep DigiCert /usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_CA.crt /usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_G2.crt /usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_G3.crt /usr/share/ca-certificates/mozilla/DigiCert_Global_Root_CA.crt /usr/share/ca-certificates/mozilla/DigiCert_Global_Root_G2.crt /usr/share/ca-certificates/mozilla/DigiCert_Global_Root_G3.crt /usr/share/ca-certificates/mozilla/DigiCert_High_Assurance_EV_Root_CA.crt /usr/share/ca-certificates/mozilla/DigiCert_Trusted_Root_G4.crt $ sha256sum /usr/share/ca-certificates/mozilla/DigiCert_High_Assurance_EV_Root_CA.crt d98f681c3a7dce812b90bf7c68046827f3bf5607357f1e4918c5dc813b359bf1 /usr/share/ca-certificates/mozilla/DigiCert_High_Assurance_EV_Root_CA.crt $ ls -l /usr/share/ca-certificates/mozilla/DigiCert_High_Assurance_EV_Root_CA.crt -rw-r--r-- 1 root root 1367 Apr 9 16:43 /usr/share/ca-certificates/mozilla/DigiCert_High_Assurance_EV_Root_CA.crt $ ls -l /etc/ssl/certs/DigiCert*EV* lrwxrwxrwx 1 root root 73 Oct 17 2012 /etc/ssl/certs/DigiCert_High_Assurance_EV_Root_CA.pem -> /usr/share/ca-certificates/mozilla/DigiCert_High_Assurance_EV_Root_CA.crt Does this file exist on your system? Does this symlink exist on your system? Thanks -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to ca-certificates in Ubuntu. https://bugs.launchpad.net/bugs/1795242 Title: Digicert certificate is not included Status in ca-certificates package in Ubuntu: Incomplete Bug description: The "DigiCert High Assurance EV Root CA" certificate is missing, which means that the system does not trust web sites that are using SSL certificates signed by that root. An example is a popular website in the Netherlands https://marktplaats.nl. The result is that no resources other that the text-only homepage is loaded. Installing the Digicert root certificte manually from Digicert solves the problem: ``` wget https://dl.cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt mv DigiCertSHA2SecureServerCA.crt DigiCertSHA2SecureServerCA.der openssl x509 -inform DER -outform PEM -in DigiCertSHA2SecureServerCA.der -out DigicertSHA2SecureServerCA.pem.crt sudo mkdir -p /usr/share/ca-certificates/extra sudo cp DigicertSHA2SecureServerCA.pem.crt /usr/share/ca-certificates/extra/ sudo dpkg-reconfigure ca-certificates ``` Maybe there is a valid reason for not including this certificate by default, or maybe this certificate can be included by default, since it seems like it's assumed to be included on every machine. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ca-certificates/+bug/1795242/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
